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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the 
application. 

1 . (Currently Amended) A method for approving a security change for a file 
security system that secures electronic files, comprising: 

receiving a request for the security change from a requestor, the security change 
being used for determining access rights comprising permission to retrieve an electronic 
file from within a secure file store; 

identifying a plurality of approvers to approve or disapprove of the requested 
security change by accessing an approver set in an approval manager module; 

notifying the approvers of an approval request for the requested security to 
change; and 

determining whether the requested security change is approved based on 
responses from the approvers to the approval request~-and 

p e rforming the r e quested security chang e when said det e rmining dotorminoG that 
the requested security chang e has b ee n approved . 

2. (Previously Presented) The method as recited in claim 1, wherein 
said notifying of the approvers is achieved by electronic mail. 

3. (Currently Amended) The method as recited in claim 2, wherein further 
comprising: 

receiving the responses from the approval group are provid e d as electronic mail. 
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4. (Currently Amended) The method as recited in claim 1, wherein 
determining whether the requested security change is approved includes determining that 
no one of the plurality of approvers can is authorized to individually approve the 
requested security change. 

5. (Currently Amended) The method as recited in claim 1, wherein the 
identifying the plurality of approvers comprises: 

identifying a plurality of approvers that are arranged as a set or group. 

6. (Currently Amended) The method as recited in claim 1, wherein the 
identifying the plurality of approvers comprises: 

identifying a plurality of approvers that are arranged in a plurality of sets or 
groups, and wherein said determining r e quires approval from whether the requested 
security change is approved comprises evaluating whether more than one of the plurality 
of sets or groups in order to determine that have approved the requested security change 
is approv e d . 

7. (Currently Amended) The method as recited in claim 6, wherein 
identifying the plurality of approvers comprises: 

identifying a the plurality of sets or groups that are arranged in a hierarchy, and 
wherein progression to a next level in the hierarchy r e quir e s comprises obtaining 
approval from the set or group associated with a current level. 
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8. 



(Currently Amended) The method as recited in claim 1 , wherein 



identifying the plurality of approvers comprises: 

identifying a the plurality of approv e rs are users of the file security system. 



identifying the plurality of approvers comprises: 

identifying a the plurality of approvers that form a set of approvers, and wherein 
said determining whether the requested security change is approved comprises 
evaluating whether determines that th e requ e st e d s e curity chang e is approv e d when a 
subset of the set of approvers approve the requested security change. 

10. (Currently Amended) The method as recited in claim 1, wherein 
identifying the plurality of approvers comprises: 

identifying the plurality of approvers identified by said identifying is d e p e ndent 
based on the requested security change. 

11. (Currently Amended) The method as recited in claim 1, wherein 
identifying the plurality of approvers comprises: 

identifying the plurality of approvers identified by said id e ntifying i s d e pend e nt 
based on the requestor. 

12. (Previously Presented) The method as recited in claim 1, wherein 
said notifying operates to substantially simultaneously notify all of the approvers of the 
approval request for the requested security change. 



9. 



(Currently Amended) The method as recited in claim 1, wherein 
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13. (Previously Presented) The method as recited in claim 1, wherein 
said notifying operates to substantially concurrently notify all of the approvers of the 
approval request for the requested security change. 

14. (Currently Amended) The method as recited in claim 1, wherein receiving 
the request for the security change comprises: 

receiving a request for a security change that applies to the e lectronic files 
secur e d by the file security syst e m ar e electronic documents. 

15. (Currently Amended) A file security system that restricts configured to 
restrict access to secured electronic documents, comprising: 

an access server configured to restrict access to the secured electronic documents; 

and 

an approval manager operatively connected to said access serve r, wh e rein said 
approval manag e r is and configured to operate a security change approval process to 
determine whether a requested security change is approved, the security change being 
used for determining access rights comprising permission to retrieve the secured 
electronic documents from within a secure file store, 

wherein, in operating the security change approval process, the approval manager 
is configured to notify a plurality of approvers ar e notified of the requested security 
change , to ask the approvers and ask e d to approve or disapprove the requested security 
change, and to access an approver set to identify the plurality of approvers id e ntifi e d by 
accessing an approver sot in an approval manager . 
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16. (Currently Amended) The file security system as recited in claim 15, 
wh e r e in said fil e security syst e m has one or more system administrators, and wherein 
said approval manager is configured to operate operates the security change approval 
process without any interaction from the one or more a system administrator 
administrators . 

17. (Cancelled) 

18. (Currently Amended) The file security system as recited in claim 15, 
wherein the approval manager is configured to notify the plurality of approvers of the 
requested security change ar e notified by notification by electronic mail messages. 

19. (Currently Amended) The file security system as recited in claim 18, 
wherein the approval manager is configured to enable the plurality of approvers to 
approve or disapprove the requested security change using reply electronic mail 
messages. 

20. (Currently Amended) The file security system as recited in claim 19, 
wherein the approval manager is configured to enable the approvers to reply to the 
requested security change by electronic mail messages that include a digital signature of 
the associated approver to verify authenticity. 



Atty. Dkt. No. 2222.5460000 



- 8 - Michael Frederick KENRICH 

Reply to Office Action of October 27, 2009 Appl. No. 10/690,243 

21. (Currently Amended) The file security system as recited in claim 15, 
wherein the approval manager is configured to specify that no one of the approvers can is 
permitted to individually approve the requested security change. 

22. (Currently Amended) The file security system as recited in claim 15, 
wherein the approval manager is configured to arrange the plurality of approvers are 
arrang e d as a set or group. 

23. (Currently Amended) The file security system as recited in claim 15, 
wherein the approval manager is configured to arrange the plurality of approvers are 
arranged into a plurality of sets or groups, and 

wherein said approval manager is configured to obtain r e quires approval from 
more than one of the plurality of sets or groups in order to determine that the requested 
security change is approved. 

24. (Currently Amended) The file security system as recited in claim ±# 23, 
wherein the approval manager is configured to arrange the plurality of sets or groups are 
arrang e d of approvers in a hierarchy, and wherein the approval manager is configured to 
allow progression of at least one of the approvers to a next level in the hierarchy in 
response to requires approval of the at least one approver from the set or group of 
approvers associated with a current level. 

25. (Previously Presented) The file security system as recited in claim 
15, wherein the approvers are users of the file security system. 
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26. (Currently Amended) The file security system as recited in claim 15, 
wherein the plurality of approvers form a set of approvers, and 

wherein said approval manager is configured to determine determines that the 
requested security change is approved in response to when a subset of the set of 
approvers approv e approving the requested security change. 

27. (Currently Amended) The file security system as recited in claim 15, 
wherein said approval manager is configured to identify identifies the plurality of 
approvers dependent on the requested security change. 

28. (Currently Amended) The file security system as recited in claim 15, 
wherein said approval manager is configured to identify identifies the plurality of 
approvers dependent on the requestor. 

29. (Currently Amended) The file security system as recited in claim 15, 
wher e in said fil e security syst e m furth e r comprises further comprising : 

a key store operatively connected to said access server , said key store and 
configured to store stor e s cryptographic keys used to gain access to the secured 
electronic documents. 

30. (Currently Amended) A tangibl e data storage device including at least 
comput e r program code An article of manufacture including a computer-readable storage 
medium having stored thereon computer-executable instructions, execution of which, by 
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a computing device, causes the computing device to perform operations for approving a 

security change for a file security system that secures electronic files, the operations 

comprising: 

computer program code for notifying a plurality of approvers of an approval 
request for the requested security change, the plurality of approvers identified by 
accessing an approver set in an approval manager module; and 

comput e r program cod e for determining whether the requested security change is 
approved based on responses from the approvers to the approval request ; and 

computer program code for performing th e requested security change when said 
d e t e rmining det e rmin e s that the requested security change has b e en approved , the 
security change being used for determining access rights comprising permission to 
retrieve an electronic file from within a secure file store. 

3 1 . (Currently Amended) The data storag e d e vice article of manufacture as 
recited in claim 30, wherein said notifying of the approvers is achieved by electronic 
mail. 

32. (Currently Amended) The data storag e d e vice article of manufacture as 
recited in claim 31, wherein the responses from the approval group are electronic mail. 

33. (Currently Amended) The data storage device article of manufacture as 
recited in claim 30, wherein no one of the plurality of approvers can individually approve 
the requested security change. 
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34. (Currently Amended) A method for approving a security change for a file 
security system that secures an electronic file, comprising: 

receiving a security change request from a requestor, the security change being 
used for determining access rights comprising permission to retrieve the electronic file 
from within a secure file store; 

determining whether the requestor is authorized to perform the requested security 
change; 

receiving an approval request from the requesto r, if the requestor is not 
authorized to perform the r e qu e sted security change ; 

based on the receipt of the approval request, performing the stops of at least the 
following : 

identifying one or more approvers to approve or disapprove of the 
requested security change; 

notifying the one or more approvers of an approval request for the 
requested security te change; and 

determining whether the requested security change is approved based on 
responses from the one or more approvers to the approval request^-and 

p e rforming the requested s e curity chang e when th e first d e t e rmining step 
det e rmines that th e r e questor is authoriz e d to perform th e r e qu e st e d security chang e , or 
wh e n th e s e cond det e rmining st e p d e termines that th e r e quest e d security chang e has be e n 
approv e d . 

35. (Currently Amended) A file security system that restricts configured to 
restrict access to a secured electronic document, comprising: 
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an access server configured to restrict access to the secured electronic document; 

and 

an approval manager module operatively connected to said access server, wherein 
said approval manager module is configured to determine whether a security change is 
authorized, the security change being used for determining access rights comprising 
permission to retrieve the secured electronic document from within a secure file store, 
and , if not, op e rates wherein the approval manager module is configured to operate, in 
response to a determination that the security change is not authorized, a security change 
approval process upon receipt of an approval request to determine whether a requested 
the security change is approved. 

36. (Currently Amended) A tangible data storage d e vice including at least 
computer program cod e An article of manufacture including a computer-readable storage 
medium having stored thereon computer-executable instructions, execution of which, by 
a computing device, causes the computing device to perform operations for approving a 
security change for a file security system that secures an electronic file, the operations 
comprising: 

comput e r program cod e for determining whether the requested security change is 
authorized, the security change being used for determining access rights te comprising 
permission to retrieve the electronic file from within a secure file store; 

comput e r program code for notifying one or more approvers of an approval 
request for the requested security changed in response to determining that the requested 
security change is not authorized,, and in response to receiving the an approval request is 
r e c e iv e d ; and 
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computer program code for determining whether the requested security change is 

approved based on responses from the one or more approvers to the approval request^ 

lXXl\J- 

computer program code for performing th e request e d security change when said 
first d e termining determines that the r e quested security change is authorized or said 
second det e rmining determin e s that th e requested s e curity change has been approved . 

37. (Currently Amended) The method of claim 1, wherein receiving the 
request for the security change comprises: 

receiving a request that relates to a the secure file store that is located at the file 
security system. 

38. (Currently Amended) The method of claim 1, wherein receiving the 
request for the security change comprises: 

receiving a request that relates to a the secure file store that is located at the 
requestor. 

39. (New) The method of claim 1, further comprising: 

determining, for at least one response received from the approvers, whether it is 
possible for a quorum of the approvers to approve the requested security change. 

40. (New) The file security system of claim 15, wherein the approval 
manager is further configured to determine, for at least one response received from the 
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approvers, whether it is possible for a quorum of the approvers to approve the requested 

security change. 

41. (New) The article of manufacture of claim 30, the operations further . 
comprising: 

determining, for at least one response received from the approvers, whether it is 
possible for a quorum of the approvers to approve the requested security change. 

42. (New) The method of claim 34, further comprising: 

determining, for at least one response received from the approvers, whether it is 
possible for a quorum of the one or more approvers to approve the requested security 
change. 

43. (New) The file security system of claim 35, wherein the approval 
manager is further configured to determine, for at least one response received from the 
approvers, whether it is possible for a quorum of approvers identified by the security 
change approval process to approve the requested security change. 

44. (New) The article of manufacture of claim 36, the operations further 
comprising: 

determining, for at least one response received from the approvers, whether it is 
possible for a quorum of the approvers to approve the requested security change. 

45. (New) The method of claim 1, further comprising: 



Atty. Dkt. No. 2222.5460000 



- 1 5 - Michael Frederick KENRICH 

Reply to Office Action of October 27, 2009 Appl. No. 10/690,243 

performing the requested security change in response to determining that the 

requested security change has been approved. 

46. (New) The article of manufacture as recited in claim 30, the operations 
further comprising: 

performing the requested security change when said determining determines that 
the requested security change has been approved. 

47. (New) The method of claim 34, further comprising: 

performing the requested security change in response to determining that the 
requestor is authorized to perform the requested security change, or in response to 
determining that the requested security change has been approved. 

48. (New) The article of manufacture of claim 36, the operations further 
comprising: 

performing the requested security change in response to determining that the 
requested security change is authorized, or in response to determining that the requested 
security change has been approved 
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